Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: wCLSpSj5RZHWdw3T4n1+gOz7uxnXF47mL+LXxB8sukE=
Subject key identifier: A4:EB:DB:A3:B1:1D:28:2D:69:8D:E3:3E:71:92:8F:6C:4C:48:AC:3A
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 0198477773255C062AFA35447D2CE6BB392E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 030F
Signing time: Sat 26 Jul 2025 16:01:07 +0000
Manifest this update: Sat 26 Jul 2025 16:01:07 +0000
Manifest next update: Sun 27 Jul 2025 16:01:07 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: rO4Hvj+VanHu7Fp1npxg73++cizykiQy1xZidBk2XTE=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:73:25:5c:06:2a:fa:35:44:7d:2c:e6:bb:39:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Jul 26 16:01:07 2025 GMT
Not After : Jul 27 16:01:07 2025 GMT
Subject: CN=a4ebdba3b11d282d698de33e71928f6c4c48ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:f6:49:1f:b4:de:36:14:0d:e4:d6:6c:41:
89:77:c9:aa:2a:3b:19:be:46:80:55:8f:92:5b:71:
95:d1:58:c8:cc:fd:eb:4e:69:e1:fb:27:ef:7a:02:
f4:46:10:76:31:35:26:c9:d0:40:02:ee:a3:23:be:
e4:a7:72:33:04:37:65:dd:0c:e5:f7:7d:b3:b6:44:
30:4e:64:19:3f:3c:74:a7:fe:c2:a1:5e:99:bf:88:
7d:ef:cb:9c:f4:a8:2a:0d:f8:64:d5:f5:ee:05:3c:
af:7d:68:60:76:70:30:f4:b0:d6:fe:15:81:99:67:
c1:ff:b3:6b:99:a4:d1:39:0c:6d:fc:f1:73:ef:4c:
fe:ff:99:03:7e:41:33:37:b2:3d:cf:99:36:73:43:
4a:65:01:bb:27:32:22:15:ab:3f:09:d6:c9:fb:59:
3b:80:7d:38:c0:7d:bb:cb:1b:0a:90:b7:4d:f9:5d:
8b:ae:51:e1:a7:97:1c:cc:1f:b1:4b:92:b0:8b:bd:
f9:4d:6b:a1:bc:09:c1:4e:f6:c3:a0:6f:00:83:bb:
91:de:a7:a0:1f:a3:9b:d1:42:e9:88:e1:a5:41:7b:
4b:94:65:5a:58:71:7e:c7:f8:50:69:4b:61:1a:0e:
0e:ba:12:cb:68:0a:9c:0f:e0:e3:05:a3:c9:36:68:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:DB:A3:B1:1D:28:2D:69:8D:E3:3E:71:92:8F:6C:4C:48:AC:3A
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ff:9c:35:36:d3:00:e5:d5:e0:e0:0b:84:ac:7e:d1:e0:9d:
f9:a6:52:9b:fb:82:3b:2b:53:a9:ff:a7:fe:45:a1:42:80:af:
a4:d4:69:66:5d:0b:19:7f:9e:b9:49:9f:94:c0:4d:72:f6:7a:
64:a1:31:9a:35:f0:65:d2:68:07:3d:dd:1c:73:0c:86:f6:7c:
87:2b:d8:69:84:d6:ec:c1:2a:66:1b:62:0a:9b:89:02:7b:0a:
f0:28:96:10:62:e4:0a:6c:98:b0:ce:92:bd:93:fb:1b:93:25:
fb:b7:eb:6f:cb:81:71:27:41:df:b1:15:0a:5d:5f:77:07:57:
89:de:4b:e0:d4:60:f8:3b:8b:c5:39:d9:3e:ca:21:3e:12:7d:
c0:4e:21:cf:1b:2d:cd:a0:4e:10:0d:55:d9:84:1a:93:11:18:
7b:09:ae:08:3f:6e:95:75:11:8d:c6:06:ac:a4:f9:23:b9:21:
49:4b:86:0c:df:52:7d:dd:0d:68:4c:cf:76:12:b7:23:0e:f8:
71:5a:21:5e:35:88:bf:37:76:aa:43:7a:ce:a5:5e:3d:f0:63:
2a:a9:18:9b:f9:32:f8:b3:73:a7:0e:97:63:f4:8d:20:1d:6b:
83:c2:c3:e7:1c:12:1f:24:b3:71:df:e3:f8:2a:db:76:0b:54:
19:61:12:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd3MlXAYq+jVEfSzmuzkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmJjMTQ1YzViMjIzOTRkNmZlYWU5OTZiYzBiYjI1MjU0
ODAxYzYwHhcNMjUwNzI2MTYwMTA3WhcNMjUwNzI3MTYwMTA3WjAzMTEwLwYDVQQD
EyhhNGViZGJhM2IxMWQyODJkNjk4ZGUzM2U3MTkyOGY2YzRjNDhhYzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0P2SR+03jYUDeTWbEGJd8mqKjsZ
vkaAVY+SW3GV0VjIzP3rTmnh+yfvegL0RhB2MTUmydBAAu6jI77kp3IzBDdl3Qzl
932ztkQwTmQZPzx0p/7CoV6Zv4h978uc9KgqDfhk1fXuBTyvfWhgdnAw9LDW/hWB
mWfB/7NrmaTROQxt/PFz70z+/5kDfkEzN7I9z5k2c0NKZQG7JzIiFas/CdbJ+1k7
gH04wH27yxsKkLdN+V2LrlHhp5cczB+xS5Kwi735TWuhvAnBTvbDoG8Ag7uR3qeg
H6Ob0ULpiOGlQXtLlGVaWHF+x/hQaUthGg4OuhLLaAqcD+DjBaPJNmjXjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTr26OxHSgtaY3jPnGSj2xMSKw6MB8GA1UdIwQY
MBaAFIUrwUXFsiOU1v6umWvAuyUlSAHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMt
OGQwNzEwZjNkMjc2LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jYTRmZjUtNDhhOC00ZWNjLWJhNzMtOGQwNzEwZjNkMjc2
LzEvaFN2QlJjV3lJNVRXX3E2WmE4QzdKU1ZJQWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoP+cNTbT
AOXV4OALhKx+0eCd+aZSm/uCOytTqf+n/kWhQoCvpNRpZl0LGX+euUmflMBNcvZ6
ZKExmjXwZdJoBz3dHHMMhvZ8hyvYaYTW7MEqZhtiCpuJAnsK8CiWEGLkCmyYsM6S
vZP7G5Ml+7frb8uBcSdB37EVCl1fdwdXid5L4NRg+DuLxTnZPsohPhJ9wE4hzxst
zaBOEA1V2YQakxEYewmuCD9ulXURjcYGrKT5I7khSUuGDN9Sfd0NaEzPdhK3Iw74
cVohXjWIvzd2qkN6zqVePfBjKqkYm/ky+LNzpw6XY/SNIB1rg8LD5xwSHySzcd/j
+CrbdgtUGWES2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:02 2025 by rpki-client